At Khanea we are dedicated to safeguarding your privacy and protecting your personal information. This Privacy Statement outlines the types of Personal Information collected, used, and disclosed by Khanea. It explains how we utilise and share this information, your options regarding its use and disclosure, and how you can correct this information.

We are committed to maintaining your privacy and complying with the laws and regulations under applicable privacy laws in Australia, including the Privacy Act 1988 (Privacy Act) and their respective regulations. From time to time, we may make changes to this Privacy Statement. The Privacy Statement is current as of the "last revised" date at the top of this page. Personal Information will be handled according to the Privacy Statement in effect at the time of collection, unless we obtain your consent to handle it differently.

This Privacy Statement covers the following topics:

What is Personal Information?

"Personal Information" refers to any information that can be attributed to you as an individual. This may include, but is not limited to, your name, contact details, information related to your physical or mental health, including your family's health history, and information related to healthcare provision, as well as Khanea usernames and passwords. Personal Information, however, does not include your name, job title, business address, and business phone number when acting as an employee of an organisation.

How do we collect your Personal Information?

We will always collect your Personal Information through fair and lawful means. Personal Information may be collected directly from you or from third parties with your consent or as required or permitted by law.

Where do we store your Personal Information?

At Khanea, we take the utmost care to ensure your personal information is stored securely. Our data storage systems are designed with advanced security measures to protect your confidentiality and privacy. Personal information is stored on encrypted servers with restricted access, ensuring that only authorized personnel can access sensitive data. Additionally, we comply with all relevant data protection laws and regulations to safeguard your information throughout your journey with us.

How do we use your Personal Information?

We identify the purposes for using your Personal Information when we collect it and obtain your consent before using it. Generally, we use your Personal Information for the following purposes (the "Purposes"):

To facilitate and administer your access to the Khanea Services.

To facilitate communication with employees and third-party service providers, such as Physicians, Nurse Practitioners, and Pharmacists, with whom we have a contractual relationship.

To inform you about new programs and services that may interest you.

To respond to your inquiries, complaints, or requests.

To collect feedback on Khanea’s operations.

To investigate and defend legal claims.

Other purposes for which Khanea may seek consent from time to time.

Other uses as permitted or required by applicable law.

To whom do we provide your Personal Information?

In general, we only disclose Personal Information to individuals for whom you have provided consent. 

However, there are exceptions:

We may transfer Personal Information to third-party service providers with whom we have a contractual agreement that includes appropriate privacy standards, such as Physicians, Nurse Practitioners, Pharmacists, and service providers that provide telephone support or data storage or processing.

We may also disclose Personal Information to a potential acquirer in connection with the sale of some or all of Khanea’s business. In this case, the use of your Personal Information by the new entity will remain subject to applicable law. 

Additionally, we may send Personal Information outside of the country for the purposes outlined above. However, please be aware that when Personal Information is transferred outside of the country, it is subject to the laws of the country in which it is held, and may be disclosed to the government, courts, or law enforcement agencies of that country, as required by its laws.

When and how do we obtain your consent?

We generally obtain your consent before collecting, using, or disclosing your Personal Information for any purpose. You can provide your consent to us orally, electronically, or in writing. The form of consent we seek, including whether it is expressed or implied, depends on the sensitivity of the personal information and the reasonable expectations in the circumstances. In some cases, we may rely on a third party to obtain your consent to share your Personal Information with us. You have the option to withdraw your consent by notifying us. You may expressly instruct that your personal health information not be used or disclosed for healthcare purposes without your consent.

How do we ensure the privacy of your Personal Information when dealing with our affiliates and other third parties?

We ensure that all affiliates and third parties engaged to perform services on our behalf and provided with Personal Information are contractually obligated to adhere to the intent of this Privacy Statement and our privacy practices.

How long will we use, disclose, or retain your Personal Information?

We will use, disclose, or retain your Personal Information for as long as necessary to fulfill the purposes for which it was collected and as allowed or required by law.

How can you review your Personal Information that we have collected, used, or disclosed?

If you submit a written request to review any Personal Information about you that we have collected, used, or disclosed, we will provide you with that Personal Information to the extent required by law. We will make this information available in a generally understandable form and explain any abbreviations or codes.

How do you know that the Personal Information we have on you is accurate?

We will take measures to ensure that your Personal Information is kept as accurate, complete, and up-to-date as possible. We will not routinely update your Personal Information unless it is necessary. We may expect you to provide us with written updates to your Personal Information when needed.

What if the Personal Information we have on you is inaccurate?

You have the right to challenge the accuracy or completeness of your Personal Information in our records at any time. If you demonstrate that your Personal Information in our records is inaccurate or incomplete, we will amend the information as necessary. We will also transmit the corrected information to third parties with access to your Personal Information, where appropriate.

How quickly will we respond to your written requests?

We will aim to respond to each of your written requests within 30 days of receiving them. We will inform you in writing if we cannot meet your requests within this timeframe. You have the right to make a complaint to the Privacy Commissioner of Australia regarding this time limit.

Are there any costs for requesting information about your Personal Information or our privacy practices?

We will not charge you for accessing your Personal Information in our records or for accessing our privacy practices. If any costs are associated with your request, we will provide an estimate of the approximate costs, if any, beforehand.

How do we verify that it is genuinely you requesting your Personal Information?

We may request that you provide sufficient identification to permit access to your Personal Information's existence, use, or disclosure. Such identifying information will be used solely for this purpose

What safeguards have we implemented to protect your Personal Information?

We have implemented physical, organisational, contractual, and technological security measures to protect your Personal Information from loss, theft, unauthorised access, disclosure, copying, use, or modification. Access to your Personal Information is granted only to employees, contractors, and third-party service providers who have a legitimate business need or whose duties require such information.

What information is collected by your websites and through cookies?

When you visit any of our websites, we automatically collect information from you. This includes the URL of the site you came from, your browser, your Internet Protocol (IP) address, date and time of access, data transferred, pages visited, time spent on the websites, transactions conducted, and other "clickstream" data. This information helps us in our marketing efforts, diagnosing technical issues, and improving our websites. We may also collect "de-identified data'' from website visitors, which does not identify an individual, for purposes such as monitoring system usage, improving system design, creating benchmarks, conducting trending analysis, and performing statistical analyses related to website usage.

We use functional cookies on our website to provide the desired functionality and user experience, as well as analytics cookies to collect and analyse aggregate visitor behaviour. Cookies help us understand how our websites are used and improve them, while also allowing visitors to avoid repeatedly entering the same information. You can disable cookies and still access most of our websites. Information about website visitors may be aggregated and analysed by third-party services like Google Analytics.

How can you contact us regarding access to your Personal Information or our privacy practices?

You can contact us in writing at the following email address: contact@khanea.com.

Please refrain from including any Personal Information (other than your contact information) or health information in the subject line or content of your message when contacting Khanea regarding any issue. Please note that email is not a secure method for transmitting information.

Last Revised: June 15, 2024